VYPR

ADK Web

by Google

CVEs (1)

  • CVE-2026-107858HigOct 23, 2026
    risk 0.40cvss —epss —

    Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Development Kit (ADK) for Java (com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and…